Client Protection

Questions or concerns regarding suspicious account activity? Contact the following immediately for assistance:

General Inquiries/Assistance

(813) 872-1200 (Monday-Friday; 8:00AM-6:00PM)

Lost or Stolen Visa^® Credit Card

1 (800) 325-3678

Lost or Stolen Visa^® Debit Card

1 (855) 908-4494

---

Online Banking Security

Best Practices for Online Banking

• Please note that no employee of The Bank of Tampa or company affiliated with The Bank of Tampa will contact you via email or phone requesting your Online Access ID or Password. If you are contacted by anyone requesting this information, please contact us immediately at (813) 872-1200.

• Use a dedicated PC or laptop for all online banking activity. Do not permit or allow any other kind of Internet activity to take place on that machine.

• Avoid setting up Super Users who can electronically control the online access of others in the organization.

• Use dual control methodology for initiating and approving all online payments.

• Incorporate multi-factor authentication (e.g., tokens) into the login process for every user.

• Restrict the use of ACH and wire templates to "repetitive" or "semi-repetitive" whenever possible.

• Review online banking activity daily and immediately report any suspicious transactions to your bank.

---

Credit & Debit Card Fraud Protection

Fraud Alert Management

To protect your Visa Debit Card and Visa Credit Card accounts, we monitor your transactions for potentially fraudulent activity, which may include a sudden change in locale (such as when a U.S.-issued card is used unexpectedly overseas), a sudden string of costly purchases made, or any pattern associated with fraud trends around the world.

Suspicion of Fraudulent Debit Card Activity

If we suspect fraudulent activity is occurring on your Visa Debit Card, we will contact you to validate the legitimacy of your transactions. Your responsiveness in responding to our call is critical to prevent potential fraud and to avoid restrictions we may place on your card.

• Our automated-dialer system will ask you to verify recent transaction activity on your Visa Debit Card.

• You will be able to respond using your touchtone keypad.

• A toll-free number will be provided should you have additional questions.

Suspicion of Fraudulent Credit Card Activity

If an alert is raised on your Visa Credit Card account, you will be contacted by an automated-dialer system to verify your account activity. When contact is made, the automated-dialer system will handle the call as follows:

• The call will be identified as coming from The Bank of Tampa's card service center.

• The automated system will confirm whether the call recipient is the cardholder by speaking the cardholder's name.

• If the cardholder is unavailable, a message is played asking that the cardholder return the call and the appropriate toll-free number is provided.

• If the cardholder is available, the system verifies the cardholder's identity by prompting them to enter the last four digits of their Social Security number.

Once your identity is confirmed as the cardholder, you will be prompted to confirm the reported transaction(s) as legitimate or suspect using your telephone keypad. If you indicate that you do not recognize the reported transaction(s), the call is automatically routed to a fraud alert management representative so that further action may be taken. If all transactions are acknowledged as legitimate, the call is completed and no action is taken.

Protecting Yourself from Card Fraud

Unless absolutely required for a legitimate business purpose, avoid giving out your:

• Address and zip code

• Phone number

• Date of birth

• Social Security Number

• Card or account number

• Card expiration date

Important Points on Debit Cards

• Your PIN is private. Never give it out.

• In stores and at ATMs, always cover your card and PIN and watch for:

  • Cell phone cameras, mirrors, or other tools used to view cards and PINs.

  • People watching your transactions.

  • Cashiers taking your card out of sight. Take your card to the register yourself.

  • Any unusual activity occurring at an ATM. If you feel uncomfortable, go to another ATM.

• While online, you should never respond to unsolicited e-mails that:

  • Ask you to verify your card or account number. Such e-mails are not sent by legitimate entities.

  • Links to websites. Such sites can look legitimate, but may collect data or put spyware on your computer.

Our goal is to minimize your exposure to risk and the impact of fraud. To ensure we can reach you when potential fraud is detected, be certain to keep us informed of your current phone number and address at all times.

Additionally, if you are planning any travel abroad, please inform us at (813) 872-1200 or contact your banking office so that purchases and withdrawals made overseas will not be flagged as suspicious. Informing us of travel overseas will ensure uninterrupted use of your Visa Debit Card and/or Visa Credit Card.

Finally, it is important to be diligent in monitoring your card account activity. Please contact us immediately at (813) 872-1200 if you identify any fraudulent transactions.

Foreign Travel and Your Visa Credit/Debit Cards

Many of our clients have experienced problems with their Visa Debit Cards and/or Visa Credit Cards being rejected during times of foreign travel. If you plan to travel abroad and intend to use your Visa Debit Card or Visa Credit Card during that time, please let us know. Your debit and credit cards are automatically protected by a fraud detection service that reviews transactions as they are processed. To save potential time and hassle during your trip, please contact us prior to your departure to verify your travel dates, destination(s), and the contact information to be used while you are away. The Bank of Tampa will notify its fraud detection service of your travel plans and your intended destination(s). If this measure is not completed beforehand, it is possible you may find your card blocked when you attempt to use it.

It is important to note that, even if the proper precautionary measures are taken prior to departure, the use of your Visa Debit Card or Visa Credit Card may still prompt a phone call from our fraud detection service during your travel time. Foreign transactions are watched particularly closely due to the high volume of fraudulent activity that takes place overseas. Our fraud detection service is an automated service. Should unusual patterns in purchase behavior start to appear, you will automatically be notified. Any calls generated will occur only if activity on the account scores in such a way to generate suspicion. In those cases where a phone call is received from our fraud detection service, a return call to The Bank of Tampa will be essential in order to prevent your card from being blocked for use.

It is possible we may not be able to reach you when we have concerns about transactions giving the appearance of fraud. In such cases, we may need to take preventative action and block your card until you can be reached in order to prevent potentially fraudulent activity from taking place. A return call to The Bank of Tampa will be required to confirm your transactions and remove the block from your card.

Travel Tips

When traveling overseas, we recommend using a credit card for purchase transactions. However, a debit card can also be used for the majority of transactions undertaken.

• In case of an emergency, we recommend that you carry more than one form of payment, such as other credit/debit cards and/or travelers checks and local currency (both available at The Bank of Tampa).

• Due to the constantly changing economic and political conditions occurring worldwide, there are times when certain countries are blocked from activity in their entirety, even if you notify us of your plans to travel the country in question. For current information on blocked countries, please contact us.

• Getting in contact with your cell phone provider is highly recommended before traveling overseas. Most phone carriers offer international calling plans.

For any questions or concerns regarding your travel abroad, please contact us at:

Business Hours: (813) 872-1200 
After Hours for Debit Cards: 1-800-554-8969
After Hours for Credit Cards: 1-800-325-3678
Email: travel@bankoftampa.com

Client Safety at the ATM

The Bank of Tampa wants to ensure that all of our clients are provided with valuable information to protect them from crimes related to financial activity. To this end, we are recommending that you take a moment to review the following:

• If you notice any suspicious persons loitering at or near an ATM or any other type of unusual activity occurring, please use another ATM or return to the ATM at another time. Contact law enforcement if necessary.

• If you notice any unsafe conditions at one of The Bank of Tampa’s ATMs (such as non-working lighting), please contact us at (813) 872-1200.

• Please be aware that e-mail is generally not secure. E-mail sent to us by outside sources via our public domain is not encrypted and may not be secure. Confidential information should not be included in e-mails sent to us.

Skimmers at Gas Stations:  A Warning for Consumers

Here are some helpful guidelines provided by the Florida Department of Agriculture to help avoid the risk of skimmers at gas stations:

• Pay inside the store to ensure credit card information stays safe.

• Check to make sure the gas pump dispenser cabinet is closed and has not been tampered with. Many stations are now putting a piece of security tape over the cabinet to ensure it has not been opened by unauthorized individuals.

• Try to use a gas pump closer to the front of the store. Thieves often place skimmers at the gas pumps farther away from the store so they aren’t noticed as quickly.

• Use a credit card instead of a debit card. Credit cards have better fraud protection and the money is not deducted immediately from an account.

• If using a debit card at the pump, choose to run it as a credit card instead of entering a PIN. That way, your PIN remains safe.

• Regularly monitor your bank accounts to spot any unauthorized charges.

Consumers who suspect their credit card number has been compromised should report it immediately to the authorities and their credit card company.

---

Identity Theft Protection

Client and Consumer Protection:  Fraud & Identity Theft

Each year, thousands of people are victimized by financial crimes such as identity theft and other forms of fraud. The Bank of Tampa is constantly working behind the scenes to ensure that client information and financial transactions are protected to the highest standard possible. At the same time, we ask our clients to frequently and carefully review their account activity and immediately let us know of any discrepancies or suspicious activity at (813) 872-1200.

The United States Federal Trade Commission (FTC) maintains a website to provide a one-stop information resource for consumers and businesses pertaining to fraud prevention and response. The website is Federal Trade Commission. In addition, the FTC has another website to help with the identification of and recovery from identity theft. If you have fallen victim, or if you would like more information on the topic, please visit IdentityTheft.gov. This site can help you determine critical steps, and gives detailed advice and helpful resources—like easy-to-print checklists and sample letters. The site also connects you to organizations that are critical to the recovery process, such as credit bureaus, the Social Security Administration, the IRS, and local consumer protection offices. Please review the information on these websites and bookmark these valuable resources for future reference.

The FTC, in partnership with other federal agencies, also manages OnGuardOnline.gov, which is a website that helps enable customers to be safe, secure, and responsible online. Visit their website for information on new and emerging threats. The FDIC also has a website dedicated to consumer news. Click here for direct access to the FDIC Consumer News Website.

Identity Theft Tips for Businesses	Identity Theft Tips for Consumers

---

Security of Financial Information and Best Practices

While the Bank may contact you regarding your account and/or suspected suspicious activity, the Bank will never ask you to provide your login credentials over the phone or via e-mail.

Below are some helpful tips to help protect businesses and individuals from identity theft and fraud.

Maintain Standardized Internal Controls

• Perform background checks on all staff.

• Implement a “Zero Tolerance” policy for internal theft or fraud.

• Institute and maintain a “need to know” policy on financial matters.

• Develop employee transition and termination procedures that include login credentials and passwords.

• Use secure mailboxes for outgoing mail that contains check images or account numbers.

• Establish policies and procedures for the destruction of secure documents.

• Establish policies and procedures for the publishing of executive signatures on any kind of electronic document.

• Implement a security awareness program for all employees.

• Perform appropriate risk assessment and internal control evaluations periodically.

PC and Network Security

• Do not divulge network or PC login credentials to anyone.

• Stay up-to-date with anti-virus protection and use firewalls.

• Download and install security patches.

• Beware of file sharing.

• Encrypt your data, including e-mails that contain sensitive information.

• Mask account numbers and tax identification numbers in electronic correspondence, showing only the last few digits (e.g., Account No. XXXXX5432).

Best Practices to Help Maintain Financial Security

• Reconcile your accounts frequently (daily is optimal).

• Secure bank statements when not in use.

• Implement ACH Debit Blocking on accounts that should never receive electronic debits.

• Implement Reverse Positive Pay on accounts that should never issue checks.

• Use safety features on your check stock and store blank checks in a secure place when not in use.

• Secure cancelled check stock, including images of cancelled checks.

• Purchase your check stock only from known vendors.

• Establish separate accounts for credit and debit activity.

• Use Positive Pay to monitor check clearing activity.

Internet Security, Information Security and Privacy Practices

The Bank of Tampa is committed to providing a secure web presence. Keeping your financial and personal information secure and confidential is one of our most important responsibilities. The bank uses industry-proven encryption and network security standards to ensure your data is protected.

• Our Personal and Commercial Online Banking websites use the industry standard for encrypting and protecting your data and may disallow traffic that does not support that standard. Please use our “Contact Us” page if you are having issues connecting.
• Please be aware that email communication is transmitted over the public internet and may not always be secure. Please use the bank’s secure email portal whenever you email confidential information to the bank. The secure email portal will encrypt the information to help ensure it is protected. Instructions and information on sending emails through the banks secure email portal can be found on our “Contact Us” page. Please keep in mind that full account numbers should not be included in email communications and that bank employees will never ask for your password to any system.

Browsing Our Site

Visitors to our website who are not logged on to Personal or Commercial Online Banking remain anonymous. Clients using Personal or Commercial Online Banking must enter their access ID and password in order to access their account information with The Bank of Tampa. A “session cookie” is required to maintain a secure Internet connection and is automatically deleted once you sign out or reach the “no activity” threshold. We do not collect any information from the session cookie. The Bank of Tampa also does not use cookies to track Internet use after a visitor or client leaves our site, including Personal and Commercial Online Banking.

Links to Other Sites

We may provide links to non-Bank companies such as Harland Clarke, our preferred check printing company. If you choose to link to sites not controlled by The Bank of Tampa, we are not responsible for the privacy or security of these sites. We encourage you to review the privacy policies of such sites.

Aggregation Sites

Aggregation sites are Internet sites that permit you to consolidate account information from various sources for viewing on one site. In most cases, the aggregation provider usually requests access to your personal information. You should ensure that the aggregator has the appropriate policies in place to protect the privacy and security of any information you provide or to which they are gaining access.

If you provide information about your accounts with The Bank of Tampa to an aggregator company, all transactions initiated by the aggregation site via the access information given will be considered authorized, whether or not you were aware of a specific transaction. If you decide to revoke the authority you have given an aggregator company, we recommend that you change your Bank password to ensure that the aggregator company cannot continue to access your account.

Free Credit Report

It is very important to always remain aware of the potential for identity theft. The Fair & Accurate Credit Transactions Act (FACT Act) mandates that the three major credit reporting agencies make your personal credit report available to you once a year at no cost. Your free credit report may be retrieved at the following website: www.annualcreditreport.com

Please be aware that your “basic” credit report is available to you at no cost. If you want to know your actual “credit score” or wish to sign up for a credit monitoring service, the credit bureau that you select will charge a fee for the additional service. The basic credit report itself is very thorough. Upon review, if you find anything that appears incorrect in your personal credit report, the website provides procedures for reporting the error to the credit bureaus.